NVD

Id
56751  
Name
CVE-2007-4631  
Description
The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on temporary files with predictable filenames.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-31  
Modified Date
2011-07-13  
Seq
2007-4631  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289297 56751 CVE-2007-4631 http://bugs.gentoo.org/show_bug.cgi?id=190697  View
289298 56751 CVE-2007-4631 FEDORA-2007-2108  View
289299 56751 CVE-2007-4631 GLSA-200710-05  View
289300 56751 CVE-2007-4631 http://sourceforge.net/project/shownotes.php?release_id=538002  View
289301 56751 CVE-2007-4631 http://sourceforge.net/project/shownotes.php?release_id=538002&group_id=139897  View
289302 56751 CVE-2007-4631 25618  View
289303 56751 CVE-2007-4631 ADV-2007-3107  View
289304 56751 CVE-2007-4631 qgit-dataloader-symlink(36503)  View
289305 56751 CVE-2007-4631 https://bugzilla.redhat.com/show_bug.cgi?id=268381  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57364 JVNDB-2007-006056 QGit の dataloader.cpp における任意のファイルを上書きされる脆弱性 QGit の dataloader.cpp の DataLoader::doStart 関数には、任意のファイルを上書きされる、および任意のコードを実行される脆弱性が存在します。 CVE-2007-4631 27986 CVE-2007-4631 56751 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006056.html 2007-08-31 2012-12-20 View